Icons8 vs Rijksmuseum

Icons8 lets any page embed one of its icons by simply writing an image URL — no signup, key, or client library needed — with free use requiring attribution and paid plans removing that requirement. A live GET against the real host, img.icons8.com, returned a genuine icon image while carrying Access-Control-Allow-Origin: *, resolving cors unknown -> yes and reconfirming auth None.

The Rijksmuseum has replaced its old key-gated REST collection API with a free, fully keyless Linked Open Data service: a Linked Art-based Search API at data.rijksmuseum.nl/search/collection and a Persistent Identifier Resolver at id.rijksmuseum.nl, both returning JSON-LD. A live GET against the real search endpoint returned 1,463 genuine matching results for a Rembrandt query with Access-Control-Allow-Origin: *, and its own docs explicitly state no API key is needed — correcting the stored url off its retired /object-metadata/api/ path (now a 404), auth API Key -> None, and cors unknown -> yes.